[Change] Tests: batsman v1.4.0 features; per-test timeout; GHA parallelism

[Change] Per-test 180s timeout via BATSMAN_TEST_TIMEOUT prevents hung scans
         from blocking entire suite (was unbounded — caused 50min anvil hangs)
[Change] GHA workflow upgraded from batsman v1.2.2 to v1.4.0: file-groups=3
         splits 53 test files into 3 groups per OS (8x3=24 parallel matrix jobs),
         parallel-jobs=4 for intra-container BATS parallelism, JUnit XML reports
[Change] yara-x GHA job: added per-test timeout and --jobs 4 parallelism

Author: rfxn

.github/workflows/smoke-test.yml

@@ -8,11 +8,15 @@ on:
 
 jobs:
   smoke-test:
-    uses: rfxn/batsman/.github/workflows/test.yml@v1.2.2
+    uses: rfxn/batsman/.github/workflows/test.yml@v1.4.0
     with:
       project-name: lmd
       os-matrix: '["debian12","centos6","centos7","rocky8","rocky9","rocky10","ubuntu2004","ubuntu2404"]'
       timeout: 25
+      file-groups: 3
+      parallel-jobs: 4
+      reports: true
+      docker-run-flags: '-e BATS_TEST_TIMEOUT=180'
 
   yara-x:
     runs-on: ubuntu-latest
@@ -41,9 +45,11 @@ jobs:
         run: |
           mkdir -p "${{ runner.temp }}/reports"
           docker run --rm \
+            -e BATS_TEST_TIMEOUT=180 \
             -v "${{ runner.temp }}/reports:/reports" \
             lmd-test-yara-x \
             bats --formatter tap \
+            --jobs 4 \
             --report-formatter junit --output /reports \
             /opt/tests/
       - name: Upload yara-x test reports

CHANGELOG

@@ -222,6 +222,9 @@ v2.0.1 | Mar 25 2026:
       when .info file is corrupt or has fewer than 9 fields
 [Fix] Docs: document scan_hashtype=both in man page, README, and conf.maldet
 [Fix] Packaging: tar fallback excludes pkg/ directory (was pkg/build only)
+[Change] Tests: batsman v1.4.0; per-test 180s timeout prevents hung scans;
+         GHA file-groups (3) for 24-way parallel matrix; BATS --jobs 4 intra-container
+         parallelism; JUnit XML reports
 [Fix] restore() and restore_hitlist(): return exit 1 on all error paths
 [Fix] YARA rules no longer counted as active when no engine available (YARA(no engine))
 

CHANGELOG.RELEASE

@@ -224,3 +224,6 @@ v2.0.1 | Mar 25 2026:
       when .info file is corrupt or has fewer than 9 fields
 [Fix] Docs: document scan_hashtype=both in man page, README, and conf.maldet
 [Fix] Packaging: tar fallback excludes pkg/ directory (was pkg/build only)
+[Change] Tests: batsman v1.4.0; per-test 180s timeout prevents hung scans;
+         GHA file-groups (3) for 24-way parallel matrix; BATS --jobs 4 intra-container
+         parallelism; JUnit XML reports

tests/Makefile

@@ -6,6 +6,11 @@ BATSMAN_OS_ALL    := $(BATSMAN_OS_MODERN) $(BATSMAN_OS_LEGACY) $(BATSMAN_OS_DEEP
 BATSMAN_RUN_TESTS := ./run-tests.sh
 BATSMAN_PROJECT   := lmd
 
+# Per-test timeout (seconds): prevents hung scans from blocking the entire suite.
+# 180s accommodates heavy scan tests; genuine hangs run 45+ minutes.
+# Override at invocation: make test BATSMAN_TEST_TIMEOUT=60
+export BATSMAN_TEST_TIMEOUT ?= 180
+
 include infra/include/Makefile.tests
 
 # UAT override: --init reaps orphaned background processes (monitor mode tests),